From 7df984516d6dcbe4de76296c99718c2ea762ca7d Mon Sep 17 00:00:00 2001
From: Matthew Wild <mwild1@gmail.com>
Date: Thu, 9 Oct 2025 10:11:59 +0100
Subject: [PATCH] xmpp_transport: Reset encryption status when initiating new
 connection

If the transport has been previously connected, the isSecure flag may still
be set from a previous connection. This can lead to not negotiating TLS on the
new connection. In practice this caused a stream error, because the post-TLS
stream reset was still sent unconditionally.

This change makes reconnecting a transport negotiate TLS successfully.
---
 xmpp_transport.go | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/xmpp_transport.go b/xmpp_transport.go
index 9e7cb21..fd53ddb 100644
--- a/xmpp_transport.go
+++ b/xmpp_transport.go
@@ -35,6 +35,9 @@ var clientStreamOpen = fmt.Sprintf("<?xml version='1.0'?><stream:stream to='%%s'
 func (t *XMPPTransport) Connect() (string, error) {
 	var err error
 
+	// Since we're starting a new connection, reset the encryption status
+	t.isSecure = false
+
 	t.conn, err = net.DialTimeout("tcp", t.Config.Address, time.Duration(t.Config.ConnectTimeout)*time.Second)
 	if err != nil {
 		return "", NewConnError(err, true)